CVE-2026-69134 SuiteCRM: SQL Injection via REST API securexss() Bypass in Relationship Management

SuiteCRM is an open-source, enterprise-ready Customer Relationship Management CRM software application. Prior to 7.15.2 and 8.10.2, the REST v4 JSON handler reads the pre-filter RAWREQUEST value and relationship write helpers interpolate supplied field values into INSERT and UPDATE statements. Th...

CVE-2026-69134

The open-source CRM application SuiteCRM is vulnerable to SQL Injection in versions prior to 7.15.2 and 8.10.2 . The flaw exists in the REST v4 JSON handler , where the RAW_REQUEST value is used by relationship write helpers (including set_relationship, SugarRelationship::addRow(), SugarRelations...